Cryptocurrency

Over 9,000 VNC Servers Exposed Online Without a Password Researchers have discovered at least 9,000 exposed VNC (virtual network computing) endpoints that can be accessed and used without authentication, allowing threat actors easy access to internal networks. VNC (virtual network computing) is a platform-independent system meant to help users connect Read more…

Phishing Attack Abuses Microsoft Azure, Google Sites to Steal Crypto A new large-scale phishing campaign targeting Coinbase, MetaMask, Kraken, and Gemini users is abusing Google Sites and Microsoft Azure Web App to create fraudulent sites. These phishing pages are promoted through comments posted to legitimate sites by a network of Read more…

deBridge Finance Crypto Platform Targeted by Lazarus Hackers Hackers suspected to be from the North Korean Lazarus group tried their luck at stealing cryptocurrency from deBridge Finance, a cross-chain protocol that enables the decentralized transfer of assets between various blockchains. The threat actor used a phishing email to trick company Read more…

FBI Warns of Fake Cryptocurrency Apps Used to Defraud Investors The FBI has warned today that cybercriminals use fraudulent cryptocurrency investment applications to steal funds from US investors. So far, the US federal law enforcement agency estimates that cyber criminals have already successfully stolen roughly $42,7 million from 244 victims. Read more…

Hackers Stole $620 million from Axie Infinity via Fake Job Interviews The hack that caused Axie Infinity losses of $620 million in crypto started with a fake job offer from North Korean hackers to one of the game’s developers. The attack happened in March 2022 and pushed into the ground the then massively Read more…

Fake Pixelmon NFT Site Infects you with Password-stealing Malware A fake Pixelmon NFT site entices fans with free tokens and collectibles while infecting them with malware that steals their cryptocurrency wallets. Pixelmon is a popular NFT project whose roadmap includes creating an online metaverse game where you can collect, train, and battle Read more…

Crypto Thief Threatened to Cut Man’s Fingers ‘one by one,’ Stole £34K Online crypto scams and ponzi schemes leveraging social media platforms are hardly anything new. BleepingComputer has previously reported on crypto thieves abusing Instagram for running ‘investment’ scams that people could and have fallen for. But, this gruesome case of a London-based crypto Read more…

FBI Links Largest Crypto Hack Ever to North Korean Hackers The Treasury Department’s Office of Foreign Assets Control (OFAC) has sanctioned the address that received the cryptocurrency stolen in the largest cryptocurrency hack ever, the hack of Axie Infinity’s Ronin network bridge. The Federal Bureau of Investigation (FBI) said two Read more…

Fake Trezor Data Breach Emails Used to Steal Cryptocurrency Wallets A compromised Trezor hardware wallet mailing list was used to send fake data breach notifications to steal cryptocurrency wallets and the assets stored within them. Trezor is a hardware cryptocurrency wallet that allows you to store your crypto assets offline, Read more…

Chinese Hacking Group Uses New ‘Fire Chili’ Windows Rootkit The Chinese hacking group Deep Panda is targeting VMware Horizon servers with the Log4Shell exploit to deploy a novel rootkit named ‘Fire Chili.’ The rootkit is digitally signed using a certificate from Frostburn Studios (game developer) or one from Comodo (security Read more…